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DETAILED ACTION 

This is a response to Applicant's Remarks filed on August 16, 2007. 
Claims 1-29 were originally pending. Claim 14 has been amended. 
Claims 1-29 are currently pending. 

Amendment to the Specification to correct typographical errors have been accepted. 

Response to Arguments 

1 . Applicant's arguments, see Remarks, filed on August 16, 2007, with respect to 
the rejection(s) of claims 1-29 under 35 (JSC 102(b) in view of Roberts et al. [US PN 
6295551 B1], and Hickman [US 6173332 B1] have been fully considered and are 
persuasive. Therefore, the rejection has been withdrawn. However, upon further 
consideration, a new ground(s) of rejection is made in view of previously cited art 
Roberts et al. [US 6295551 B1] and further in view of new art by Satyavolu et al. [US 
7225464 B2]. 

Claim Rejections - 35 USC §103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1 , 148 USPQ 459 
(1966), that are applied for establishing a background for determining obviousness 
under 35 U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the levelof ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating 
obviousness or nonobviousness. 

1 . Claim 1-29 are rejected under 35 U.S.C. 103(a) as being unpatentable over 

Roberts et al. [US 6295551 B1] hereinafter Roberts, and further in view of Satyavolu et 

al. [US 7225464 B2] hereinafter Satyavolu. 

Regarding claim 18, Roberts teaches a method of sharing data across a computing 
system, the method comprising: receiving requests to authenticate the authenticated 
user from a plurality of applications on a plurality of computing platforms being 
accessed by the authenticated user [US 6295551 B1, Col 11, Ln 14-15]; receiving non- 
authentication data provided by a first instance of the authenticated user using an 
application in a first domain [US 6295551 B1, Col 8, Ln 23-26]; storing the non- 
authentication data provided by the first instance of the authenticated user using the 
application in the first domain [It is inherent that non-authentication data has been 
stored if each computers are retrieving the shared content independently. US 6295551 
B1 , Col 8, Ln 35-40]; receiving a request for non-authentication data from a second 
instance of the application in a second domain [US 6295551 B1, Col 8, Ln 1-11], and 
supplying the requested non-authentication data provided by the first instance of the 
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application in the first domain to the second instance of the application in the second 
domain [US 6295551 B1 , Col 8, Ln 25-26]. 

Roberts does not explicitly teach receiving requests subsequent to an initial 
authentication of a user and automatically authenticating the authenticated user to the 
plurality of applications being accessed by the authenticated user responsive to the 
initial authentication of the user. 

Satyavolu teaches receiving requests subsequent to an initial authentication of a user 
[US 7225464 B2, Col 6, Ln 30-32] and automatically authenticating the authenticated 
user to the plurality of applications being accessed by the authenticated user responsive 
to the initial authentication of the user [US 7225464 B2, Col 6, Ln 54-62]. 

It would have been obvious to one of ordinary person skilled in the art at the time of 
invention to include SSO or Single Sign On architecture of Satyavolu to the invention of 
Roberts. The suggestion/motivation for including SSO is to enable the user to avoid 
repeated login procedures [US 7225464 B2, Col 2, Ln 1-5]. Satyavolu is analogous art 
because it solves the problem of users of avoiding repeated login procedures for 
accessing applications/resources across different terminals/platforms. 

Regarding claim 19, Roberts and Satyavolu teach the method of claim 18, wherein the 
second instance of the application in the second domain is associated with a second 
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user [US 6295551 B1, Col 13, Ln61]. 

Regarding claim 20, Roberts and Satyavolu teach the method of claim 18, further 
comprising: receiving log on information from a user [US 7225464 B2, Col 2, Ln 1-5]; 
determining that the user is logging on to the computing system for the first time [US 
7225464 B2, Col 6, Ln 11-13]; subsequent to the determination that a user is logging on 
to the computing system for the first time, verifying the identity of the user [US 7225464 
B2, Col 6, Ln 1]; prompting the user to supply a user id and password [US 7225464 B2, 
Col 6, Ln 2]; providing the user id and password supplied by the user to a data registry 
to be stored therein [US 7225464 B2, Col 2, Ln 20-23]; capturing application 
authentication information provided by the user during the computing session [US 
7225464 B2, Col 2, Ln 55]; storing the application authentication information provided 
by the user during the computing session in the data registry [US 7225464 B2, Col 2, Ln 
45-46] wherein the data registry is configured to store authentication and non- 
authentication data [US 6295551 B1, Col 14, Ln 48-59]. 

Regarding claim 21, Roberts and Satyavolu teach the method of claim 18, wherein an 
operating platform used by the first domain differs from an operating platform used by 
the second domain [Operating platform used by the first domain differs from an 
operating platform used by the second domain is taught since JAVA objects are being 
utilized enabling a "cross-platform" system. US 6295551 B1, Col 8, Ln 52-65]. 
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Regarding claim 22, Roberts and Satyavolu teach the method of claim 18, further 
comprising storing authentication data in the data registry [US 6295551 B1, Col 14, Ln 
55-56] [US 7225464 B2, Col 2, Ln 45-46]. 

Regarding claim 23, Roberts and Satyavolu teach the method of claim 18, wherein the 
non-authentication data provided by the first instance of the application in the first 
domain comprises configuration information for customizing a user's application 
environment [US 6295551 B1, Col 12, Ln 66 - Col 1 3, Ln 60]. 

Regarding claim 24, Roberts and Satyavolu teach the method of claim 18, wherein the 
non-authentication data provided by the first instance of the application in the first 
domain includes state information with which the user's application state from the first 
instance of the application in the first domain can be maintained to the second instance 
of the application in the second domain [US 6295551 B1, Col 12, Ln 66- Col 13, Ln 60] 
[US 6295551 B1, Col 14, Ln 48-59] [US 6295551 B1, Col 18, Ln 35-38]. 

Regarding claim 25, Roberts and Satyavolu teach the method of claim 18, wherein 
storing the non-authentication data comprises: configuring a non-authentication data 
attribute; storing a value for the non-authentication data attribute associated with the 
user; and responsive to a request identifying the non-authentication data attribute, 
providing the value of the non-authentication data attribute to a requesting application 
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[US 6295551 B1, Col 12, Ln 66 - Col 13, Ln 60] [US 6295551 B1, Col 14, Ln 48-59] [US 
6295551 B1, Col 18, Ln 35-38]. 

Regarding claim 26, Roberts and Satyavolu teach the method of claim 18, wherein the 
request for non-authentication data associated with the authenticated user is generated 
responsive to a call trigger [US 659551 B1 , Col 8, Ln 45-51]. 

Regarding claim 27, Roberts and Satyavolu teach the method of claim 18, wherein the 
step of receiving non-authentication data provided by a first instance of an application 
used by the authenticated user comprises receiving the non-authentication data from a 
synchronizing module on a computer for sending non-authentication data from the local 
cache of the computer, the data having been stored in the local cache when the 
authenticated user was disconnected from the networked system [US 659551 B1, Col 9, 
Ln 25-38]. 

Claim 1 is rejected because it is the system apparatus performing the method of claim 
18. 

Regarding claim 2, Roberts and Satyavolu teach the cross-platform single sign-on 
system of claim 1 , wherein web services technologies are used to transmit requests for 
authentication and non-authentication data from a plurality of computer systems hosting 
the plurality of applications to the interface module [US 6295551 B1 , Col 8, Ln 52-65 - 
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The different objects are the different applications available in a connection/session.] 
[US 7225464 B2, Col 5, Ln 41 - XML]. 

Regarding claim 3, Roberts and Satyavolu teach the cross-platform single sign-on 
system of claim 1 , wherein the non- authentication data includes state information 
reflecting a state of a selected application on a first computer accessed by the user that 
can be retrieved when the selected application is being accessed from a second 
computer [US 6295551 B1 , Col 12, Ln 66 - Col 1 3, Ln 60] [US 6295551 B1 , Col 14, Ln 
48-59] [US 6295551 B1, Col 18, Ln 35-38] [For different application objects showing 
identical/synchronous information, it is inherent that state information is being 
transferred.]. 

Claim 4 is rejected because it is the system apparatus performing the method of claim 
19. 



Regarding claim 5, Roberts and Satyavolu teach the cross-platform single sign-on 
system of claim 1 , wherein the interface module is further configured to receive requests 
to store authentication and non- authentication data associated with the user from a 
plurality of applications on a plurality of computing platforms in the computing system 
and, based upon authentication of a user at the beginning of a computing session and 
responsive to the requests, to store the data to the data registry [Non-authentication 
data, eg. state information, has been stored by the server if the server needs to wait for 
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an acknowledgement for the shared content to be updated. US 6295551 B1 , Col 8, Ln 
25-26] [US 7225464 B2, Col 2, Ln 45-46]. 

Regarding claim 6, Roberts and Satyavolu teach the cross-platform single sign-on 
system of claim 1 , wherein the interface module formats data queries to the data 
registry in accordance with a data exchange protocol accepted by the data registry [US 
7225464 B2, Col 5, Ln 39-59] [Javascript- US 6295551 B1, Col 12, Ln 60]. 

Regarding claim 7, Roberts and Satyavolu teach the cross-platform single sign-on 
system of claim 1 , wherein the data registry is further configured to receive requests for 
authentication and non-authentication data directly from the plurality of applications on 
the plurality of computing platforms, and for the requested data to be retrieved from the 
data registry responsive to the requests [US 629551 B1, Col 12, Ln 39-50] [US 6295551 
B1 , Col 14, Ln 48-59] [The data registry is hosted in the server and thus receive 
requests directly from other computers requesting a connection/session. The passage 
teaches the many different kinds of authentication and non-authentication data being 
transferred.] [US 7225464 B2, Col 2, Ln 45-46]. 

Regarding claim 8, Roberts and Satyavolu teach the cross-platform single sign-on 
system of claim 1 , wherein a request to retrieve authentication and non-authentication 
data associated with the user is sent responsive to an event trigger activated during the 
user's computing session [US 6295551 B1, Col 8, Ln 45-51]. 
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Regarding claim 9, Roberts and Satyavolu teach the cross-platform single sign-on 
system of claim 8, wherein the event trigger comprises at least one of: the 
authentication of a user, a user command, and the passage of a pre-determined interval 
of time [US 6295551 B1 , Col 8, Ln 1-17]. 

Regarding claim 10, Roberts and Satyavolu teach the cross-platform single sign-on 
system of claim 1, wherein the interface module and authentication module are 
commonly hosted on a single computer [US 7225464 B2, Fig 1]. 

Regarding claim 1 1 , Roberts and Satyavolu teach the cross-platform single sign-on 
system of claim 1, wherein at least one of the plurality of computing platforms differs 
from another at least another of the plurality of computing platforms [An operating 
platform used by the first domain differs from an operating platform used by the second 
domain is taught since JAVA objects are being utilized enabling a "cross-platform" 
system. US 6295551 B1, Col 8, Ln 52-65]. 

Regarding claim 12, Roberts and Satyavolu teach the cross-platform single sign-on 
system of claim 1 , further comprising: a Caching module for storing non-authentication 
data generated by an application in the local cache of the computer hosting the 
application when the computer is disconnected from the computing system; and a 
synchronizing module for sending non-authentication data stored in the local cache to 
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the data registry when the computer is connected to the computing system [US 
6295551 B1 , Col 9, Ln 25-38 -The "persistent" applet is loaded into a local cache and 
being persistent inherently teaches a synchronizing module that will keep computers in- 
synchronization as long as the computer remains in a session. It inherently teaches 
protecting sessions from network interruptions since it explicitly states that it remains in 
the cache unless it gets removed by the user computer.]. 

Claim 13 is rejected because it is the system apparatus performing the method of claim 
20. 



Regarding claim 14, Roberts and Satyavolu teach a data registry for storing and 
providing data across a computing system, the data registry comprising [There is 
implementation of database/data registry. US 6295551 B1, Col 11, Ln 27]: a plurality of 
user data entries [US 6295551 B1, Col 11, Ln 25-31], each of the user data entries 
describing a unique user of a computing system comprised of a plurality of computing 
platforms and a plurality of applications [There exist different types of users with 
different kinds of applications, and types of computer, ie. sales representative, 
customer, administrator. US 6295551 B1, (Col 11, Ln 5) (Col 10, Ln 57)]; a plurality of 
authentication entries associated with each of the user data entries for authenticating 
the user on the plurality of applications of the computing system [US 6295551 B1, Col 
1 1, Ln 5-14 ~ This passage inherently teach a plurality of authentication entries 
because the server can ascertain and validate which type of user is making a request.]; 
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and a plurality of non-authentication attributes and attribute entries associated with each 
of the user data entries in which information about a user's use of an application can be 
preserved [US 6295551 B1, Col 10, Ln 56-67; Col 14, Ln 48-59 -- Passage inherently 
teach a plurality of non-authentication attributes and attribute entries because the server 
can ascertain what applet and associated objects are needed by a user making the 
request. Also the passage teaches a session box which inherently capture information 
about a user's use of an application.]. 

Regarding claim 15, Roberts and Satyavolu teach the data registry of claim 14, wherein 
the non-authentication data includes state information for one of the plurality of 
applications, whereby a user may switch between a first computer and a second 
computer and preserve the state of a selected application accessed using the first 
computer when accessing the selected application from the second computer [US 
6295551 B1, Col 12, Ln 66 -Col 13, Ln 60; Col 14, Ln 48-59; Col 18, Ln 35-38]. 

Regarding claim 16, Roberts and Satyavolu teach the data registry of claim 14, wherein 
the non-authentication data includes configuration information for one of the plurality of 
applications with which a user's application environment can be customized [US 
6295551 B1 , Col 1 2, Ln 66 - Col 1 3, Ln 60]. 

Regarding claim 17, Roberts and Satyavolu teach the data registry of claim 14, further 
comprising an interface module that receives web service requests for storing and 
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providing data from one of the plurality of applications and, responsive to the requests, 
saves the data to the data registry [US 6295551 B1 , Col 12, Ln 39-50 - The data 
registry is in the server that also runs the applet. This passage cites command scripts 
which teaches web service requests.] 

Regarding claim 28, Roberts and Satyavolu teach the system of claim 1 , wherein the 
non-authentication data comprises one of: configurations data, settings data, or 
applications data, environment data [US 659551 B1, Col 12, Ln 66 -Col 13, Ln 60] [US 
659551 B1 , Col 14, Ln 48-59] [US 659551 B1 , Col 1 8, Ln 35-38]. 

Regarding claim 29, Roberts and Satyavolu teach the system of claim 1 , wherein the 
non-authentication data comprises one of: a size of a window, the configuration of a tool 
bar, and the selection of open files [US 659551 B1 , Col 12, Ln 66 - Col 1 3, Ln 60] [US 
659551 B1, Col 14, Ln 48-59] [US 659551 B1, Col 18, Ln 35-38]. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Martin Jeriko P. San Juan whose telephone number is 
571-272-7875. The examiner can normally be reached on M-F 8:30a - 6:00p EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
v you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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